With Internal DNS server, if the server is authoritative for domain.tld, then other implementation (bind, MS, ...) are returning a SOA when a non existing name is queried (ie. nonexist.domain.tld)
See packet 9 for windows behavior and packet 255 for samba behavior